Microsoft 70-643 Online Practice Questions and Exam Preparation

Microsoft 70-643 Online Questions & Answers

• Question 31:

  

  Your network contains a Web server named Web1 that runs Windows Server 2008 R2. Web1 has a wildcard certificate installed. Web1 has two Web sites as shown.

  

  You discover that when you go to the URL https://site1.contoso.com in Internet Explorer, you connect to Site2.

  You need to ensure that when users go to https://site1.contso.com in Internet Explorer, they connect to Site1.

  The solution must ensure that all connections to Site1 are secure. Which two settings should you modify? (Each correct answer presents part of the solution. Choose two.)

  A. the bindings for Site1
  B. the bindings for Site2
  C. the HTTP Redirect settings for Site1
  D. the HTTP Redirect settings for Site2
  A. the bindings for Site1
  B. the bindings for Site2

• Question 32:

  Your company runs Windows Server 2008. The company network is configured as an Active Directory domain named contoso.com. The network has a Web server named WEB1. The domain users access WEB1 by using http://web1.

  You generate a self-signed certificate for WEB1 and configure WEB1 to use SSL. Users report that they get a warning message when they connect to WEB1 by using https://web1.

  You need to ensure that users can connect to WEB1 without receiving a warning message.

  What should you do?

  A. Add the https: //web1 name to the list of Trusted Sites zone on all the computers in the domain.
  B. Open the Certificates console on WEB1. Export the self-signed certificate to a web1.cer file. Install the web1.cer file on all the computers in the domain.
  C. Join WEB1 to the contoso.com domain. Reissue the self-signed certificate. Request all the users to use https://web1.contoso.com to connect to WEB1.
  D. Create a DNS Host (A) Record for WEB1 in the contoso.com zone. Reissue the self-signed certificate. Request all the users to use https: //webl.contoso.com to connect to WEB1.
  B. Open the Certificates console on WEB1. Export the self-signed certificate to a web1.cer file. Install the web1.cer file on all the computers in the domain.

  ---

  To ensure that the users can connect to TK2.com without getting warning messages, you should export the self-signed certificate to a TK2.cer file. Then, you install the tk2.cer file on all computers accessing the website. The users account will be authenticated through the certificate and they will not get any warning messages. The .cer file is an internet security certificate extension which confirms the authenticity of a website installed on a server.

• Question 33:

  Your company has a single Active Directory domain. All the servers run Windows Server 2008. You have a server named FS1 that has the File Services role installed.

  The company requires that the data disk drives provide redundancy.

  The disks are configured as shown in the following exhibit.

  

  You need to configure the hard disk drives to support RAID 1.

  Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

  A. Convert Disk 1 and Disk 2 to Dynamic.
  B. Create a Striped Volume across Disk 1 and Disk 2.
  C. Create a New Mirrored Volume by using Disk 1 and Disk 2.
  D. Create a New Spanned Volume by using Disk 1 and Disk 2.
  A. Convert Disk 1 and Disk 2 to Dynamic.
  C. Create a New Mirrored Volume by using Disk 1 and Disk 2.

  ---

  To configure the hard drives to support Raid1, you should create Disk1 and Disk 2 as dynamic drives and create a new mirrored volume using Disk1 and Disk 2. In data storage, disk mirroring or RAID1 is the replication of logical disk volumes onto separate physical hard disks in real time to ensure continuous availability. A mirrored volume is a complete logical representation of separate volume copies.

  Reference: technet2.microsoft.com/windowsserver/en/library/28af1c0d-8490-4ab0-8be0- 49e5923c4bae1033.mspx

• Question 34:

  Your network contains a server that runs Windows Server 2008 R2. The server has the Web Server (IIS) role installed.

  The server has a Web application that uses HTTP. All authentication methods are enabled for the Web application.

  You need to prevent passwords from being sent over the network in clear text.

  Which two authentication methods should you disable? (Each correct answer presents part of the solution. Choose two.)

  A. Anonymous
  B. Basic
  C. Digest
  D. Forms
  E. Windows Integrated
  B. Basic
  D. Forms

  ---

  Configure Basic Authentication (IIS 7)

  Basic authentication requires that users provide a valid user name and password to access content. This authentication method does not require a specific browser, and all major browsers support it. Basic authentication also works across

  firewalls and proxy servers. For these reasons, it is a good choice when you want to restrict access to some, but not all, content on a server. However, the disadvantage of Basic authentication is that it transmits unencrypted base64-encoded passwords across the network. You should use Basic authentication only when you know that the connection between the client and the server is secure. The connection should be established either over a dedicated line or by using Secure Sockets Layer (SSL) encryption and Transport Layer Security (TLS). For example, to use

  Basic authentication with Web Distributed Authoring and Versioning (WebDAV), you should configure SSL encryption.

  http://technet.microsoft.com/en-us/library/cc772009(WS.10).aspx Configuring Forms Authentication (IIS 7)

  Forms authentication uses client-side redirection to forward unauthenticated users to an HTML form where they can enter their credentials, which are usually a user name and password. After the credentials are validated, users are redirected

  to the page they originally requested. Because Forms authentication sends the user name and password to the Web server as plain text , you should use Secure Sockets Layer (SSL) encryption for the logon page and for all other pages in

  your application except the home page.

  http://technet.microsoft.com/en-us/library/cc771077(WS.10).aspx Check this link on MSDN for a nice comparisation of all authentication methods:

  http://msdn.microsoft.com/en-us/library/aa292114.aspx

• Question 35:

  You have a server that runs Windows Server 2008 R2. The server has the RD Gateway role service installed.

  You need to provide a security group access to the RD Gateway server.

  What should you do?

  A. Add the security group to the Remote Desktop Users group.
  B. Add the security group to the TS Web Access Computers group.
  C. Create and configure a Remote Desktop Resource Authorization Policy.
  D. Create and configure a Remote Desktop Connection Authorization Policy.
  D. Create and configure a Remote Desktop Connection Authorization Policy.

  ---

  Remote Desktop connection authorization policies (RD CAPs) allow you to specify who can connect to an RD Gateway server.

  Source: http://technet.microsoft.com/en-us/library/cc753324.aspx

• Question 36:

  Your network contains three servers that run Windows Server 2008 R2. The servers are configured as shown in the following table.

  

  Server1 has Remote Desktop Services Per Device client access licenses (RDS Per Device CALs) installed.

  Server2 and Server3 are members of a Remote Desktop Connection Broker (RD Connection Broker) farm.

  Four months after Server2 and Server3 are deployed, you discover that users can no longer establish Remote Desktop sessions on Server3.

  You verify that Server3 is online and that all required services on Server3 run properly. You verify that the users can establish Remote Desktop sessions on Server2. You need to ensure that the users connecting to the RD Connection Broker

  farm can establish sessions on Server3.

  What should you do?

  A. On Server3, enable dedicated farm redirection.
  B. On Server3, configure the Remote Desktop licensing settings.
  C. On Server1, install additional RDS Per Device CALs.
  D. On Server1, run the Manage RDS CALs wizard and click the Migrate action.
  B. On Server3, configure the Remote Desktop licensing settings.

  ---

  You must configure RD Licensing correctly in order for your RD Session Host server to accept connections from clients. To allow ample time for you to deploy a license server, Remote Desktop Services provides a licensing grace period for

  the RD Session Host server during which no license server is required. During this grace period, an RD Session Host server can accept connections from unlicensed clients without contacting a license server. The grace period begins the first

  time the RD Session Host server accepts a client connection.

  A permanent RDS CAL is issued by a license server to a client connecting to the RD Session Host server.

  The number of days in the grace period is exceeded.

  The length of the grace period is based on the operating system running on the RD Session Host server.

  The grace periods are as follows:

  Source: http://technet.microsoft.com/en-us/library/cc725933.aspx

• Question 37:

  Your company has a single Active Directory domain. You have a server named WDS1 that runs Windows Server 2008. You install the Windows Deployment Services (WDS) role on WDS1.

  You capture an image of a reference computer. You deploy the image to 30 client computers. The client computers have the same name.

  You need to ensure that each client computer receives a unique security identifier.

  What should you do?

  A. Create an image group by using the WDS snap-in. Redeploy the image to the client computers.
  B. Run the imagex /append "computername" command at the command prompt on the WDS1 server. Redeploy the image to the client computers.
  C. Run the wdsutil /answerclients:all command at the command prompt on the WDS1 server. Redeploy the image to the client computers.
  D. Run the wdsutil /set-server/prestageusingMAC: yes command at the command prompt on the WDS1 server. Redeploy the image to the client computers.
  D. Run the wdsutil /set-server/prestageusingMAC: yes command at the command prompt on the WDS1 server. Redeploy the image to the client computers.

• Question 38:

  Your network contains a Web server that runs Windows Server 2008 R2.

  You need to back up all Web site content.

  Which tool should you use?

  A. Appcmd
  B. Internet Information Services (IIS) Manager
  C. Internet Information Services (IIS) 6.0 Manager
  D. Wbadmin
  D. Wbadmin

  ---

  Wbadmin

  Backups are usally done with Windows Server Backup;

  Wbadmin is the command-line counterpart to Windows Server Backup. You use Wbadmin to manage all aspects of backup configuration that you would otherwise manage in Windows Server Backup. This means that you can typically use

  either tool to manage backup and recovery. Source: http://technet.microsoft.com/en-us/magazine/dd767786.aspx To not only backup the website content but also the IIS configuration backup the systemstate:

  The -systemState parameter:

  For Windows7 and Windows Server 2008 R2, creates a backup that includes the system state in addition to any other items that you specified with the -include parameter. The system state contains boot files (Boot.ini, NDTLDR,

  NTDetect.com), the Windows Registry including COM settings, the SYSVOL (Group Policies and Logon Scripts), the Active Directory and NTDS.DIT on Domain Controllers and, if the certificates service is installed, the Certificate Store. If your

  server has the Web server role installed, the IIS Metadirectory will be included. If the server is part of a cluster, Cluster Service information will also be included.

  Source: http://technet.microsoft.com/en-us/library/cc742083(WS.10).aspx

  Appcmd

  The backup feature of Appcmd only backups the configuration of the IIS server, not the websites:

  After you install IIS 7.0, you can backup your configuration by using the built-in command-line tool, AppCmd. exe. You can run AppCmd.exe to create a backup of your Web server before you have changed any configuration.

  Files configuration IIS server:

  Administration.config

  ApplicationHost.config

  Redirection.config

  MBSchema.xml

  MetaBase.xml

  To create a backup using AppCmd.exe

  1.

  Open a command prompt as administrator and change to the %windir%\system32\inetsrv\ directory.

  2.

  At the command prompt, type appcmd add backup "FirstBackup" and then press Enter.

  3.

  This creates a backup with the name "FirstBackup". At a later date, if you need to restore the backup, use appcmd restore backup "FirstBackup"

  Source: http://learn.iis.net/page.aspx/199/create-a-backup-with-appcmd/

• Question 39:

  Your network contains an Active Directory domain. The domain contains a server that runs Windows Server 2008 R2. The server has the Remote Desktop Session Host (RD Session Host) role service and the Remote Desktop Web Access

  (RD Web Access) role service installed.

  When domain users run RemoteApp programs from the RD Web Access page, they are prompted for their credentials.

  You need to ensure that the domain users can run the RemoteApp programs without being prompted for their credentials.

  What should you do?

  A. From RemoteApp Deployment Settings, configure the Digital Signature Settings.
  B. On each client computer, add the URL of the RD Web Access Web site to the Trusted sites zone.
  C. From RemoteApp Deployment Settings, configure the Common RDP Settings.
  D. on each client computer, add the URL of the RD Web Access Web site to the Local intranet zone.
  A. From RemoteApp Deployment Settings, configure the Digital Signature Settings.

  ---

  

• Question 40:

  Your network contains a server named Server1 that has Microsoft SharePoint Foundation 2010 installed.

  Server1 contains a Web application named WebApp1. You activate the Office Web Apps Feature on WebApp1.

  When users open Microsoft Office Word documents from WebApp1, the documents open in Word.

  You need to ensure that when users open Word documents from WebApp1, the documents open in a Web browser.

  What should you do?

  A. Deactivate the OpenInClient feature.
  B. Run the Set-SPWebApplication cmdlet.
  C. Restart the SharePoint 2010 User Code Host service.
  D. Recycle the SharePoint Web Services Root application pool.
  A. Deactivate the OpenInClient feature.

  ---

  Configure the default open behavior for documents In SharePoint, you can configure whether browser-enabled documents are opened in a client application or in the browser. By default, when Office Web Apps is installed, Office documents will open in the browser. You can override this setting using the SharePoint OpenInClient feature. The OpenInClient feature can be configured in Central Administration or by using the SPFeature cmdlet in Windows PowerShell. How documents open in SharePoint varies depending on whether the OpenInClient feature is present, and either enabled or disabled: If the OpenInClient feature is not present and Office Web Apps is not installed, documents will open in the client application (SharePoint default). If the OpenInClient feature is not present, Office Web Apps is installed and Office Web Apps service applications are activated, documents will open in the browser (Office Web Apps default). If the OpenInClient Feature is present and enabled, and Office Web Apps service applications are activated, documents will open in the client application.

  If the OpenInClient Feature is present and disabled, and Office Web Apps service applications are activated, documents in will open in the browser.

  Source: http://technet.microsoft.com/en-us/library/ee837425.aspx